add --passwordlist option

instead of using a tokenlist, --passwordlist reads complete passwords
(exactly one per line) from the file with no additional processing